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Amendments to the Claims: 

Please amend claims 1,13, 21, 24, 28, 32 and 34, please add new claims 35-47, and 
please cancel claim 10 as follows. 

This listing of claims replaces all prior versions, and listings, of claims in the application. 

Listing of claims: 

1 . (Currently Amended) A method for preventing unauthorized use of digital content data to 
be transferred from a first system to a second system comprising: 

locating an archive of a digital content data at the first system; 
determining transaction data of the second system that identifies the second 

system ; 

determining whether the transaction data of the second system indicates whether 
the second system is a valid recipient of the archive; 

modifying the archive using the transaction data of the second system that 
identifies the second system to generate a modified archive; and 

transferring the modified archive from the first system to the second system if the 
second system is a valid recipient. 

2. (Original) The method of claim 1 further comprising, if the second system is not a valid 
recipient, transferring the archive from the first system to the second system, the 
operation of the archive failing in the second system. 

3. (Original) The method of claim 1 wherein the first system comprises a hard media and 
wherein the second system comprises a computer system. 

4. (Original) The method of claim 1 wherein the first system comprises a first computer 
system and wherein the second system comprises a second computer system. 
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5. (Original) The method of claim 4 wherein the first and second computer systems are 
remotely located. 

6. (Original) The method of claim 1 wherein determining transaction data of the second 
system comprises determining a data element selected from the group of data elements 
consisting of: transaction identification; system configuration information; manufacturer, 
serial number, and physical properties. 

7. (Original) The method of claim 1 wherein determining transaction data of the second 
system comprises downloading an analysis tool to the second system, and running the 
analysis tool to examine the second system and to generate a unique identifying value that 
identifies the second system as the transaction data. 

8. ,(Original) The method of claim 7 wherein the unique identifying value is deposited in the 
archive that is transferred to the second system. 

9. (Original) The method of claim 8 wherein the unique identifying value is encrypted and 
interleaved with the digital content data in the transferred archive. 

10. (Cancelled) 

1 1 . (Currently Amended) The method of claim [[ 10] ]1 further comprising increasing a 
memory allocation of the archive before modifying the archive with the transaction data. 

12. (Original) The method of claim 1 1 further comprising creating a map of the increased 
memory allocation. 

13. (Currently Amended) The method of claim 12 further comprising storing the map in the 
archive, or in memory locations of the second system, or in the first system.[[.]] 
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14. (Original) The method of claim 1 further comprising, before transferring the archive, 
removing a plurality of original data segments from memory locations of the archive and 
storing false data at the memory locations. 

15. (Original) The method of claim 14 further comprising storing the original data in the 
archive, or in memory locations of the second system, or in the first system. 

16. (Original) The method of claim 15 further comprising generating a map of the memory 
locations. 

17. (Original) The method of claim 16 further comprising storing the map in the archive, or 
in memory locations of the second system, or in the first system. 

18. (Original) The method of claim 14 wherein the false data comprises a machine instruction 
that initiates an abnormal condition in the digital content data when processed. 

19. (Original) The method of claim 14 wherein the second system, following transfer of the 
archive, replaces the false data with the original data segments if the second system is a 
valid recipient. 

20. (Original) The method of claim 19 wherein the second system replaces the false data by 
the original data segments immediately prior to execution of the corresponding memory 
locations, and replaces the original data by the false data immediately following 
execution of the corresponding memory locations. 

2 1 . (Currently Amended) A method for preventing unauthorized use of digital content data 
hosted on a system comprising: 

examining system devices that are operating in the system; 

determining whether any of the system devices are emulator devices; and 
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initiating a nondeterministic defense action , in event if it is determined that an 
emulator device is operating on the system wherein the nondeterministic defense action 
obfuscates the cause of the defense action . 

22. (Original) The method of claim 21 wherein the system devices comprise physical devices 
or logical entities. 

23. (Original) The method of claim 21 wherein the emulator devices comprise hardware- 
based emulator devices or software-based emulator devices. 

24. (Currently Amended) A method for preventing unauthorized use of digital content data 
hosted on a system comprising: 

determining whether an unauthorized use of the digital content data is in progress; 

and 

in the case where an unauthorized use is determined, initiating a defense action by 
disabling only an input device in association with the unauthorized use . 

25. (Original) The method of claim 24 wherein disabling an input device comprises disabling 
a combination of keystrokes at a keyboard input device. 

26. (Original) The method of claim 24 further comprising disabling the input device with 
regard to user interface windows related to the unauthorized use. 

27. (Original) The method of claim 26 wherein the input device comprises a keyboard or a 
mouse. 

28. (Currently Amended) A method for preventing unauthorized use of digital content data 
hosted on a system comprising: 

executing a plurality of system processes; 
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monitoring at each process for unauthorized use and each process transferring a 
status message to another process related to the unauthorized use; and 

each process determining whether an unauthorized use has occurred, and, if such 
a determination is made, initiating a nondeterministic defense action wherein the 
nondeterministic defense action obfuscates the cause of the defense action . 

29. (Original) The method of claim 28 wherein the status messages further relate to 
authorized use. 

30. (Original) The method of claim 28 further comprising interleaving and encrypting each 
status message before transferring the status message. 

3 1 . (Original) The method of claim 28 wherein the status messages are temporarily stored at a 
virtual memory location on the system. 

32. (Currently Amended) A method for preventing unauthorized use of digital content data 
hosted on a system comprising: 

during the operation of a function operating on the system, determining whether 
an unauthorized use of the digital content data is in progress; and 

in the case where an unauthorized use is determined, initiating a nondeterministic 
defense action that is integrated into the function wherein the nondeterministic defense 
action obfuscates the cause of the defense action . 

33. (Original) The method of claim 32 wherein the function is a non-defensive function. 

34. (Currently Amended) The method of claim 32 wherein the nondeterministic defense 
action comprises reading and writing data values critical to system operation repeatedly to 
a decoy process. 
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35. (New) The method of claim 1 wherein a watermark is deposited in the archive that is 
transferred to the second system. 

36. (New) The method of claim 7 wherein the unique identifying value is used to create a 
system unique encryption key. 

37. (New) The method of claim 14 wherein the false data comprises a machine instruction 
which is not properly functional when processed. 

38. (New) The method of claim 1 further comprising aborting transfer of the archive from the 
first system to the second system if the second system is an invalid recipient of the 
archive. 

39. (New) The method of claim 38 wherein the transfer of the archive is aborted immediately 
if the second system is an invalid recipient of the archive. 

40. (New) The method of claim 38 wherein the transfer of the archive is aborted in an 
indirect manner if the second system is an invalid recipient of the archive. 

41 . (New) The method of claim 38 further comprising, if it is determined that the second 
system is an invalid recipient of the archive, further modifying the archive to insert 
executable data into the archive that causes an exit, an error condition, or communication 
to another system entity which begins a cascading exit process, in the second system, and 
transferring the further modified archive to the second system. 

42. (New) The method of claim 1 further comprising the second system receiving the 
transferred archive and de-interleaving or de-crypting the archive using the transaction 
data of the second system so that the digital content data can be executed by the second 
system. 
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43. (New) The method of claim 21 wherein initiating the nondeterministic defense action 
includes initiating a nondeterministic order of exit of system entities. 

44. (New) The method of claim 24 wherein the input device is only disabled in an 
unauthorized interface window when the target focus for the input device is an 
unauthorized application associated with the unauthorized interface window. 

45. (New) The method of claim 24 further comprising allowing proper function of the input 
device in an authorized interface window when the target focus for the input device is an 
authorized application associated with the authorized interface window. 

46. (New) The method of claim 28 wherein initiating the nondeterministic defense-action — 
includes initiating a nondeterministic order of exit of system entities. 

47. (New) The method of claim 32 wherein initiating the nondeterministic defense action 
includes initiating a nondeterministic order of exit of system entities. 
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